Error when moving Azure certificate to another subscription: Property id '' at path 'properties.keyVaultId' is invalid

I am trying to move my Azure AppService website and all inked resources to another subscription. I am using the following command:
```
az resource move --destination-group --destination-subscription-id "" --ids
"/subscriptions//resourceGroups//providers/Microsoft.DomainRegistration/domains/.com"
"/subscriptions//resourceGroups//providers/Microsoft.Network/dnszones/.com"
"/subscriptions//resourceGroups//providers/Microsoft.Web/certificates/www..com"
"/subscriptions//resourceGroups//providers/Microsoft.Web/serverFarms/ASP--81a3"
"/subscriptions//resourceGroups//providers/Microsoft.Web/sites/"
```

The command returns the following error
```
Deployment failed. Correlation ID: f391e0d7-9de4-45bb-ac97-4bccb2ddd487. {"error":{"code":"LinkedInvalidPropertyId","message":"Property id '' at path 'properties.keyVaultId' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'."}}
```

I inspected all the rescources that I tried to move, and found out that the empty `keyVaultId` property is in the SSL Certificate resource. I am using Azure's free managed SSL Certificate, and it's not stored in KeyVault, so I don't understand why it's complaining about KeyVault ID.

This exact command used to work fine for me in the past, so this must be some recent change that is causing this error.